CVE-2017-0905
- Source
- https://cve.org/CVERecord?id=CVE-2017-0905
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-0905.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2017-0905
- Aliases
- Published
- 2017-11-13T17:29:00Z
- Modified
- 2026-05-18T05:48:25Z
- Severity
-
- 9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
The Recurly Client Ruby Library before 2.0.13, 2.1.11, 2.2.5, 2.3.10, 2.4.11, 2.5.4, 2.6.3, 2.7.8, 2.8.2, 2.9.2, 2.10.4, 2.11.3 is vulnerable to a Server-Side Request Forgery vulnerability in the "Resource#find" method that could result in compromise of API keys or other critical resources.
- Database specific
{ "unresolved_ranges": [ { "cpes": [ "cpe:2.3:a:recurly:recurly_client_ruby:2.7.0:*:*:*:*:*:*:*" ], "extracted_events": [ { "last_affected": "2.7.0" } ], "source": "CPE_FIELD", "vendor_product": "recurly:recurly_client_ruby" } ] }- References
Affected packages
Git / github.com/recurly/recurly-client-ruby
Affected ranges
- Type
- GIT
- Repo
- https://github.com/recurly/recurly-client-ruby
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast AffectedLast Affected
- Database specific
-
Show details
{ "cpe": [ "cpe:2.3:a:recurly:recurly_client_ruby:2.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.0.1:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.0.2:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.0.3:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.0.4:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.0.5:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.0.6:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.0.7:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.0.8:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.0.9:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.0.10:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.0.11:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.0.12:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.1.0:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.1.0:c:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.1.1:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.1.2:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.1.3:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.1.4:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.1.5:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.1.6:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.1.7:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.1.8:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.1.9:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.1.10:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.2.0:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.2.1:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.2.2:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.2.3:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.2.4:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.3.0:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.3.0:beta1:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.3.1:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.3.2:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.3.3:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.3.4:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.3.5:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.3.6:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.3.7:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.3.8:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.3.9:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.4.1:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.4.2:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.4.3:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.4.4:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.4.5:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.4.6:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.4.7:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.4.8:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.4.9:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.4.10:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.5.0:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.5.1:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.5.2:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.5.3:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.6.0:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.6.1:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.6.2:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.7.1:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.7.2:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.7.3:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.7.4:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.7.5:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.7.6:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.7.7:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.8.0:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.8.0:rc1:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.8.0:rc3:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.8.1:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.9.0:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.9.1:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.10.0:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.10.1:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.10.2:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.10.3:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.11.0:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.11.1:*:*:*:*:*:*:*", "cpe:2.3:a:recurly:recurly_client_ruby:2.11.2:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "0" }, { "last_affected": "2.0.0" }, { "last_affected": "2.0.1" }, { "last_affected": "2.0.2" }, { "last_affected": "2.0.3" }, { "last_affected": "2.0.4" }, { "last_affected": "2.0.5" }, { "last_affected": "2.0.6" }, { "last_affected": "2.0.7" }, { "last_affected": "2.0.8" }, { "last_affected": "2.0.9" }, { "last_affected": "2.0.10" }, { "last_affected": "2.0.11" }, { "last_affected": "2.0.12" }, { "last_affected": "2.1.0" }, { "last_affected": "2.1.0-c" }, { "last_affected": "2.1.1" }, { "last_affected": "2.1.2" }, { "last_affected": "2.1.3" }, { "last_affected": "2.1.4" }, { "last_affected": "2.1.5" }, { "last_affected": "2.1.6" }, { "last_affected": "2.1.7" }, { "last_affected": "2.1.8" }, { "last_affected": "2.1.9" }, { "last_affected": "2.1.10" }, { "last_affected": "2.2.0" }, { "last_affected": "2.2.1" }, { "last_affected": "2.2.2" }, { "last_affected": "2.2.3" }, { "last_affected": "2.2.4" }, { "last_affected": "2.3.0" }, { "last_affected": "2.3.0-beta1" }, { "last_affected": "2.3.1" }, { "last_affected": "2.3.2" }, { "last_affected": "2.3.3" }, { "last_affected": "2.3.4" }, { "last_affected": "2.3.5" }, { "last_affected": "2.3.6" }, { "last_affected": "2.3.7" }, { "last_affected": "2.3.8" }, { "last_affected": "2.3.9" }, { "last_affected": "2.4.0" }, { "last_affected": "2.4.1" }, { "last_affected": "2.4.2" }, { "last_affected": "2.4.3" }, { "last_affected": "2.4.4" }, { "last_affected": "2.4.5" }, { "last_affected": "2.4.6" }, { "last_affected": "2.4.7" }, { "last_affected": "2.4.8" }, { "last_affected": "2.4.9" }, { "last_affected": "2.4.10" }, { "last_affected": "2.5.0" }, { "last_affected": "2.5.1" }, { "last_affected": "2.5.2" }, { "last_affected": "2.5.3" }, { "last_affected": "2.6.0" }, { "last_affected": "2.6.1" }, { "last_affected": "2.6.2" }, { "last_affected": "2.7.1" }, { "last_affected": "2.7.2" }, { "last_affected": "2.7.3" }, { "last_affected": "2.7.4" }, { "last_affected": "2.7.5" }, { "last_affected": "2.7.6" }, { "last_affected": "2.7.7" }, { "last_affected": "2.8.0" }, { "last_affected": "2.8.0-rc1" }, { "last_affected": "2.8.0-rc3" }, { "last_affected": "2.8.1" }, { "last_affected": "2.9.0" }, { "last_affected": "2.9.1" }, { "last_affected": "2.10.0" }, { "last_affected": "2.10.1" }, { "last_affected": "2.10.2" }, { "last_affected": "2.10.3" }, { "last_affected": "2.11.0" }, { "last_affected": "2.11.1" }, { "last_affected": "2.11.2" } ], "source": "CPE_FIELD" }
Affected versions
2.*
2.0.0
2.0.1
2.0.10
2.0.11
2.0.12
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.0c
2.1.1
2.1.10
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
2.10.0
2.10.1
2.10.2
2.10.3
2.11.0
2.11.1
2.11.2
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.3.0
2.3.0.beta1
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
2.3.6
2.3.7
2.3.8
2.3.9
2.4.0
2.4.1
2.4.10
2.4.2
2.4.3
2.4.4
2.4.5
2.4.6
2.4.7
2.4.8
2.4.9
2.5.0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.1
2.6.2
2.7.1
2.7.2
2.7.3
2.7.4
2.7.5
2.7.6
2.7.7
2.8.0
2.8.0.rc1
2.8.0.rc3
2.8.1
2.9.0
2.9.1
v2.*
v2.3.4
v2.4.6
v2.6.0
v2.6.1
v2.7.3